Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/eWYCRLQwS5WtDzkJDrKsNzKIhpQ.roa
File:                     eWYCRLQwS5WtDzkJDrKsNzKIhpQ.roa (raw, json)
Hash identifier:          MWNizs7YFRMz3h5oGuzqckEkvGHvqdp6wSKmdPf7Cxk=
Subject key identifier:   79:66:02:44:B4:30:4B:95:AD:0F:39:09:0E:B2:AC:37:32:88:86:94
Certificate issuer:       /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial:       0185AA533C226903D1B83CC63768591DBE7E
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/eWYCRLQwS5WtDzkJDrKsNzKIhpQ.roa
Signing time:             Fri 13 Jan 2023 08:50:59 +0000
ROA not before:           Fri 13 Jan 2023 08:50:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206446
IP address blocks:        2a10:1fc0:d::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:aa:53:3c:22:69:03:d1:b8:3c:c6:37:68:59:1d:be:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
        Validity
            Not Before: Jan 13 08:50:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=79660244b4304b95ad0f39090eb2ac3732888694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:8c:6d:6a:0a:69:4d:83:f9:d4:79:5f:31:
                    88:3c:60:25:d1:66:72:c3:8f:e2:0a:18:9a:d6:d5:
                    02:26:f4:d8:c9:3d:f7:bc:2f:2a:e0:7c:07:17:67:
                    b8:80:02:ef:e6:94:6e:03:64:93:92:b3:50:ba:2c:
                    83:4b:2c:9e:f8:51:cb:5e:b5:42:16:b8:a2:b3:5d:
                    db:ab:72:b2:a7:c4:f4:c5:ed:d4:07:2d:ef:f1:f5:
                    8c:58:d4:d8:f8:88:0e:14:6e:15:3b:98:11:5e:6b:
                    d1:44:f3:63:4b:0d:74:4e:bd:3b:a7:71:1f:0d:e7:
                    cf:8f:7d:bb:8d:bd:0b:84:4b:43:77:49:9f:e4:90:
                    1c:b2:cd:c5:0a:7d:18:f6:ec:88:8e:c5:c2:0c:59:
                    b2:6d:b2:de:93:3a:a1:8b:3f:06:57:d6:35:18:1d:
                    6e:12:5c:60:c6:96:83:63:32:7c:de:6c:f2:e9:04:
                    23:2c:59:94:e9:54:5f:93:89:2b:56:d1:cb:db:fd:
                    a1:43:cd:06:28:eb:b3:68:e0:83:d2:ce:d8:06:a3:
                    e6:46:1c:2a:70:53:d2:c4:fe:ed:d6:42:03:ca:88:
                    ed:fc:68:58:dc:f7:d0:81:b8:f0:89:4e:e2:10:59:
                    bc:a0:57:ac:43:79:45:7b:14:1c:92:14:a3:4f:cc:
                    b7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:66:02:44:B4:30:4B:95:AD:0F:39:09:0E:B2:AC:37:32:88:86:94
            X509v3 Authority Key Identifier:
                keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/eWYCRLQwS5WtDzkJDrKsNzKIhpQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:1fc0:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:97:cf:bc:fc:da:16:9e:8c:fb:d7:80:a3:4c:0c:b4:4e:92:
         75:2e:87:c8:ae:a7:d8:96:4d:65:1b:68:a6:c6:00:4f:b3:41:
         06:4e:70:2b:85:7b:af:8c:50:fb:f5:dc:78:37:6a:f8:e7:25:
         32:06:c1:a5:81:14:1c:0f:e9:94:3c:7f:80:2c:14:c1:33:ea:
         e6:97:7e:41:2d:d4:e3:c9:79:1c:b8:c3:b7:e4:ab:9b:f2:39:
         a9:67:48:fd:0b:dd:00:51:ed:55:1c:20:c2:a8:58:29:6d:ef:
         84:6f:d8:f3:15:83:f0:48:80:ea:c0:d8:1d:b0:29:b0:e4:88:
         ae:67:de:44:05:dd:cc:84:8d:5d:a9:34:8b:2b:df:c2:9e:b1:
         c0:74:d1:04:4a:af:73:18:53:9a:11:ae:7c:72:c9:9a:a7:58:
         03:f0:7a:61:48:d8:19:2a:c2:57:13:fb:a9:b8:0d:66:5f:09:
         58:3f:ca:e6:3e:a6:16:9c:3e:b0:26:9f:b7:27:93:0b:4e:97:
         52:e9:89:82:4b:1d:a6:75:b0:af:bd:61:da:e5:7f:6f:b0:14:
         8c:94:be:05:c0:03:cc:82:85:6b:50:cf:1a:bb:fb:01:0b:d5:
         f8:0b:6c:6a:64:c0:fe:32:53:c4:b5:29:83:40:57:77:81:5a:
         17:2b:79:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----